Privacy Policy
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data means any data by which you can be personally identified. Detailed information on data protection is provided in the full Privacy Policy below.
1. Data Protection at a Glance
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. The operator's contact details are listed in the section "Controller" in this Privacy Policy.
How do we collect your data?
Some data is collected when you provide it to us, for example by email or when booking a call through the external Google Calendar link.
Other data is collected automatically, or after your consent, by our IT systems when you visit the website. This mainly includes technical data such as browser type, operating system, device information, IP address, referrer URL, and the time of page access. This data is collected automatically as soon as you access the website.
What do we use your data for?
Data is used to provide and secure the website, communicate with you, respond to enquiries, and prepare or perform client relationships.
What rights do you have regarding your data?
You have the right to receive information, free of charge, about the origin, recipients, and purpose of your stored personal data. You also have the right to request correction or deletion of this data. If you have given consent to data processing, you may withdraw that consent at any time for the future. You also have the right, under certain circumstances, to request restriction of processing of your personal data and to object to processing. You have the right to lodge a complaint with a competent supervisory authority.
You may contact us at any time with questions about data protection or to exercise your rights.
Analytics and Advertising
This website does not implement analytics or advertising tools.
2. Hosting
External Hosting
This website is hosted on Vercel. The hosting infrastructure processes technical request data needed to deliver and secure the website, such as IP address, browser and device information, requested URL, referrer and time of access.
External hosting is used for the purpose of contract performance with potential and existing clients under Art. 6(1)(b) GDPR and in our legitimate interest in the secure, fast, and efficient provision of our online offering by a professional provider under Art. 6(1)(f) GDPR. Where consent is requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's device, such as device fingerprinting. Consent can be withdrawn at any time.
Vercel provides information about its processing and data-processing terms at https://vercel.com/legal/privacy-notice and https://vercel.com/legal/dpa.
3. General Information and Mandatory Notices
Data Protection
We take the protection of your personal data seriously. We treat your personal data confidentially and in accordance with applicable data protection laws and this Privacy Policy.
When you use this website, various types of personal data may be collected. Personal data means data by which you can be personally identified. This Privacy Policy explains what data we collect, what we use it for, and the purposes and legal bases of that processing.
Please note that data transmission over the internet, including communication by email, may have security vulnerabilities. Complete protection of data against access by third parties is not possible.
Controller
The controller responsible for data processing on this website is:
OKTOPODS Agency GmbH
Schottmüllerstraße 17A, 20251 Hamburg, Germany
privacy@oktopods.de
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names or email addresses.
Storage Period
Unless a more specific storage period is stated in this Privacy Policy, your personal data remains with us until the purpose for processing no longer applies. If you submit a valid deletion request or withdraw consent to processing, your data will be deleted unless we have other legally permissible grounds for storing it, such as tax or commercial retention periods. In that case, deletion takes place once those grounds no longer apply.
Legal Bases for Processing
If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR where special categories of personal data under Art. 9(1) GDPR are processed. If you have expressly consented to the transfer of personal data to third countries, processing may also be based on Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your device, processing is additionally based on Section 25(1) TDDDG. Consent can be withdrawn at any time.
Where your data is required for contract performance or pre-contractual measures, processing is based on Art. 6(1)(b) GDPR. Where processing is required to comply with a legal obligation, it is based on Art. 6(1)(c) GDPR. Processing may also be based on our legitimate interests under Art. 6(1)(f) GDPR. The specific legal bases are explained in the relevant sections of this Privacy Policy.
Recipients of Personal Data
As part of our business activities, we work with external service providers. In some cases, it is necessary to transfer personal data to these external parties. We disclose personal data only where this is necessary for contract performance, where we are legally obliged to do so, where we have a legitimate interest under Art. 6(1)(f) GDPR, or where another legal basis permits the disclosure.
When we use processors, we disclose personal data only on the basis of a valid data processing agreement. If joint processing applies, we enter into a joint controller agreement.
Withdrawal of Consent
Many data processing operations are possible only with your express consent. You may withdraw consent you have already given at any time. The lawfulness of processing carried out before withdrawal remains unaffected.
Right to Object to Processing and Direct Marketing
If data processing is based on Art. 6(1)(e) or Art. 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data. This also applies to profiling based on those provisions. The relevant legal basis for each processing activity is described in this Privacy Policy.
If you object, we will no longer process the relevant personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or unless the processing serves the establishment, exercise, or defence of legal claims.
If your personal data is processed for direct marketing, you have the right to object at any time to processing for that purpose. This also applies to profiling connected with direct marketing. If you object, your personal data will no longer be used for direct marketing.
Right to Lodge a Complaint with a Supervisory Authority
If you believe that the GDPR has been infringed, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, workplace, or the place of the alleged infringement. This right exists without prejudice to other administrative or judicial remedies.
Right to Data Portability
You have the right to receive data that we process automatically on the basis of your consent or in performance of a contract in a commonly used, machine-readable format, or to have it transferred to another controller where technically feasible.
Access, Rectification, and Erasure
Within the scope of applicable law, you have the right to obtain free information about your stored personal data, its origin, recipients, and the purpose of processing. You may also have the right to correction or deletion of this data. You can contact us at any time about this or with further questions about personal data.
Restriction of Processing
You have the right to request restriction of processing of your personal data. This right applies in particular where:
1. you dispute the accuracy of your personal data and we need time to verify it;
2. processing is unlawful and you request restriction instead of deletion;
3. we no longer need the personal data, but you need it for the establishment, exercise, or defence of legal claims; or
4. you have objected under Art. 21(1) GDPR and it has not yet been determined whose interests prevail.
Where processing has been restricted, such personal data may, except for storage, be processed only with your consent, for the establishment, exercise, or defence of legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.
SSL or TLS Encryption
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as enquiries you send to us as the website operator. You can recognise an encrypted connection by the change from "http://" to "https://" in your browser address bar and by the lock symbol in your browser.
When SSL or TLS encryption is active, the data you transmit to us cannot generally be read by third parties.
4. Data Collection on This Website
Cookies and Local Storage
Essential browser storage remembers the privacy choice you make on this device, including your selection and the time it was saved. You can change your choice through Cookie Settings. No analytics or advertising tools are used.
Contact by Email or Phone
If you contact us by email or phone, your enquiry and all personal data arising from it, such as your name, email address, phone number, company and message, will be stored and processed by us for the purpose of handling your enquiry. We do not disclose this data without your consent unless there is another legal basis.
Processing is based on Art. 6(1)(b) GDPR where your enquiry relates to contract performance or pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling enquiries addressed to us under Art. 6(1)(f) GDPR or on your consent under Art. 6(1)(a) GDPR if consent was requested. Consent can be withdrawn at any time.
The data you send to us through contact enquiries remains with us until you request deletion, withdraw consent to storage, or the purpose for storage no longer applies, for example after your enquiry has been fully processed. Mandatory statutory provisions, in particular retention periods, remain unaffected.
Booking a Call with Google Calendar
Book a Clarity Call opens Google Calendar in a new tab when you choose the link. The calendar is not embedded in this website. Google processes data on its booking page under its own privacy information: https://policies.google.com/privacy. Information you provide when booking is used to arrange and handle the call.
5. AI-Assisted Services and Client Enquiries
If you contact OKTOPODS Agency GmbH about strategy, brand, design, website, or AI-related services, we may process the personal data you provide in order to assess your enquiry, prepare an offer, perform pre-contractual steps, and deliver agreed services.
Depending on the enquiry, this may include name, role, company, business email address, phone number, project information, website URLs, meeting notes, correspondence, files, and information you voluntarily provide.
Processing is based on Art. 6(1)(b) GDPR for pre-contractual or contractual purposes and Art. 6(1)(f) GDPR for our legitimate interest in managing professional enquiries and client relationships. If consent is requested for a specific processing activity, processing is based on Art. 6(1)(a) GDPR.
OKTOPODS Agency GmbH may use cloud-based tools for communication, project management, file storage, scheduling, research, drafting, and AI-assisted workflows. Do not send sensitive personal data, confidential third-party data, or special categories of personal data unless this has been agreed in advance and appropriate safeguards are in place.
Specific tools used for client project work should be listed in a separate data processing agreement or project-specific privacy notice where required.
6. Updates to This Privacy Policy
We may update this Privacy Policy from time to time so that it reflects legal, technical, or business changes. The version published on this website applies at the time of your visit.